Slice "Arc URL" to be controlled by System Administrator

Hi there,

We are having a question from customers’ security team, they are having concerns that system administrator has no control over how the Arc URL is being configured, right now the system configuration is done purely by the end users.

They would like to ask if there is a way to lock how the configuration file so that a specific person can ONLY connect to a specific Arc URL and nothing else, something similar to the Windows Start up script where administrator can make changes to the tm1p.ini file, and users also have no access right to update the file by himself, any update will not be committed, as soon as Slice re-open, it will return the URL to the administrator-configured URL.

Any idea how this can be done?